Re: [PATCH] scsi: libsas: Fix use-after-free in sas_suspend_devices()

From: Wentao Liang

Date: Sun Nov 08 2026 - 07:23:58 EST


Hi John,

Sorry for the very late reply.

You are right: the reference held while the device sits on port->dev_list
keeps it alive, and an LLD never owns such a reference, so
list_for_each_entry_safe() would not fix anything. Please drop this patch;
I am withdrawing it and will not send a v2.

The candidate came from a static-analysis run audited with DeepSeek and
GPT-6.1 Sol, and it is a false positive on our side.

Thanks for taking the time to review the patch,
Wentao